[GitHub] incubator-hawq pull request #886: HAWQ-1032. Fix bug of set bucket number of...

[asfgit]

Github user asfgit closed the pull request at:

https://github.com/apache/incubator-hawq/pull/886


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---

[GitHub] incubator-hawq issue #886: HAWQ-1032. Fix bug of set bucket number of child ...

[xunzhang]

Github user xunzhang commented on the issue:

https://github.com/apache/incubator-hawq/pull/886
  
+1


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---

[GitHub] incubator-hawq pull request #885: HAWQ-1033. Add --force option for hawq reg...

[xunzhang]

GitHub user xunzhang opened a pull request:

https://github.com/apache/incubator-hawq/pull/885

HAWQ-1033. Add --force option for hawq register.



You can merge this pull request into a Git repository by running:

$ git pull https://github.com/xunzhang/incubator-hawq HAWQ-1033

Alternatively you can review and apply these changes as the patch at:

https://github.com/apache/incubator-hawq/pull/885.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

This closes #885


commit 5629418b4c171eb0a3acb88179a9a24a74c14d88
Author: xunzhang 
Date:   2016-09-02T07:33:03Z

HAWQ-1033. Add --force option for hawq register.




---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---

[GitHub] incubator-hawq pull request #729: HAWQ-828. Remove deprecated aggregate, gro...

[zhangh43]

Github user zhangh43 closed the pull request at:

https://github.com/apache/incubator-hawq/pull/729


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---

[GitHub] incubator-hawq pull request #881: HAWQ-1032. Bucket number of new added part...

[zhangh43]

Github user zhangh43 closed the pull request at:

https://github.com/apache/incubator-hawq/pull/881


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---

[GitHub] incubator-hawq issue #884: HAWQ-1032. Set bucket number of child partition t...

[ztao1987]

Github user ztao1987 commented on the issue:

https://github.com/apache/incubator-hawq/pull/884
  
+1


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---

[GitHub] incubator-hawq issue #884: HAWQ-1032. Set bucket number of child partition t...

[xunzhang]

Github user xunzhang commented on the issue:

https://github.com/apache/incubator-hawq/pull/884
  
LGTM


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---

[jira] [Commented] (HAWQ-1036) Support user impersonation in PXF for external tables

[Vineet Goel (JIRA)]

[ 
https://issues.apache.org/jira/browse/HAWQ-1036?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15457649#comment-15457649
 ] 

Vineet Goel commented on HAWQ-1036:
---

This is a useful feature needed in PXF for external tables access, for 
security-sensitive data access in HDFS. My thoughts:

1) As the description/title suggests, we should keep the scope of this JIRA to 
PXF External table access, not HAWQ Internal tables. 
2) Changing the HAWQ’s HDFS storage permission/ACL policy should be out of 
scope. That is a complex and separate set of work and not sure if it solves a 
problem for HAWQ users. If HAWQ is your SQL access point, then the assumption 
is that HAWQ database authorization is serving comprehensive control management 
on internal tables. Ranger integration (HAWQ-256) plays a role here as well. 
All HAWQ data files have the same HDFS permission model.
3) Lili, given the scope limited to PXF External tables, some of the questions 
that you asked above may not be an issue in PXF case. Is that right?
4) Alastair, good point on the SET SESSION scenario. 

Things I’m wondering about, that may need research/discussion:

a) The impersonation might just apply the same to Readable as well as writable 
PXF tables as well. True?
b) External authentication such as LDAP are very important in this case as well 
as Ranger, if there are issues with trusting super users, who could create role 
and database logins to impersonate users for PXF external tables access. 
c) Does anything change if Hive is using “SQL Standard-Based Authorization” 
instead of Storage-Based Authorization? Do HDFS files have the same ACLs & 
permissions in both cases, for external table reads?


> Support user impersonation in PXF for external tables
> -
>
> Key: HAWQ-1036
> URL: https://issues.apache.org/jira/browse/HAWQ-1036
> Project: Apache HAWQ
>  Issue Type: New Feature
>  Components: PXF, Security
>Reporter: Alastair "Bell" Turner
>Assignee: Goden Yao
>Priority: Critical
> Fix For: backlog
>
> Attachments: HAWQ_Impersonation_rationale.txt
>
>
> Currently HAWQ executes all queries as the user running the HAWQ process or 
> the user running the PXF process, not as the user who issued the query via 
> ODBC/JDBC/... This restricts the options available for integrating with 
> existing security defined in HDFS, Hive, etc.
> Impersonation provides an alternative Ranger integration (as discussed in 
> HAWQ-256 ) for consistent security across HAWQ, HDFS, Hive...



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)